CVE Catalog

CVE-2026-73345

HighCVSS 7.1
Published: Translated: NVD NIST

Summary

SQL Injection vulnerability in License Manager for WooCommerce versions up to 3.0.18. An attacker can inject malicious SQL code through the customer field.

Risk Assessment

Potential unauthorized access to the database, data theft, or data modification.

Recommendation

Update the plugin to the latest version that includes the fix.

Original NVD description (English source)

Customer SQL Injection in License Manager for WooCommerce <= 3.0.18 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS